Coinbase, in collaboration with Stanford University cryptography professor Dan Boneh and Localhost Research, held a closed-door post-quantum Bitcoin seminar at Stanford. Attendees included Bitcoin developers, cryptographers, institutional custodians, and hardware wallet experts.

The meeting assessed advancements in quantum computing, the current state of post-quantum cryptography, and the volume, verification costs, and key management costs of different post-quantum signatures in Bitcoin. It also discussed new output types, institutional custody constraints, and protective measures for assets that cannot be migrated in time, in comparison to the Ethereum roadmap. Attendees agreed that it is impossible to accurately predict when quantum computers related to cryptography will appear, and that establishing testable solutions is more important than betting on timelines; quantum computing is not an immediate crisis, but early coordination can prevent rushed hard forks under pressure.

Currently, there is no single perfect solution. Security, transaction volume, hardware performance, backup, and user migration difficulties are all interrelated. Quantum resistance cannot rely solely on consensus upgrades; it also depends on how individuals, custodians, and hardware generate, store, back up, and migrate keys. Coinbase stated that migration is more likely to occur in phases and will retain the flexibility to replace more mature algorithms. The meeting did not finalize a solution but aimed to outline issues and promote engineering tests.

Localhost Research has established a post-quantum cryptography group with Dan Boneh and Benedikt Bünz, prioritizing the review of hash signature schemes aimed at Bitcoin. Coinbase's quantum advisory committee previously estimated that factors like address reuse expose about 7 million Bitcoins to future public key visible attacks; Dan Boneh himself warned that forcing migration before 2029 could introduce protocol flaws that are more dangerous than quantum attacks themselves.

From a market mechanism perspective, this is a rehearsal for custodianship and hardware supply chains, not an immediate sell-off signal. Beneficiaries are custodians, hardware wallets, and auditors that can serve both old addresses and new output types; those under pressure are dormant warehouses with long-term reused addresses that cannot complete key rotations and some exchange cold wallets. Funds will temporarily remain in existing UTXOs, with actual migration occurring after new output types can be broadcast by mainstream wallets.

The outcome of the meeting is a list of issues, not an activation timeline. Without a consensus algorithm, there is no enforced migration window.

Source: Public Information